Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft
File:                     XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft (raw, json)
Hash identifier:          DnAWDe1F5yhbSl5zyaekWKelEIMqAZ30DXB1d9De9uc=
Subject key identifier:   FC:DA:52:7C:1D:01:35:58:94:4B:EF:B7:45:3B:86:C0:0B:79:F7:AD
Authority key identifier: 5E:42:C3:56:12:F4:5A:F4:11:03:52:0A:F2:76:1C:DA:A5:1E:3A:A4
Certificate issuer:       /CN=5e42c35612f45af41103520af2761cdaa51e3aa4
Certificate serial:       019E205A6A9920013E019998E052A01E3CF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft
Manifest number:          1806
Signing time:             Wed 13 May 2026 08:00:56 +0000
Manifest this update:     Wed 13 May 2026 08:00:56 +0000
Manifest next update:     Thu 14 May 2026 08:00:56 +0000
Files and hashes:         1: XkLDVhL0WvQRA1IK8nYc2qUeOqQ.crl (hash: XSE6EDNuicCVPn1fAp4ck0dPxEE2YvDlNkLJr5TfcNE=)
                          2: kk41E9wK0dMNp3UzVD82jZ-Xu_A.roa (hash: uelRjQS+f/j8WooWIB3/Gzm3JA/8BAj3iz0X2FN7kXs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:5a:6a:99:20:01:3e:01:99:98:e0:52:a0:1e:3c:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e42c35612f45af41103520af2761cdaa51e3aa4
        Validity
            Not Before: May 13 08:00:56 2026 GMT
            Not After : May 14 08:00:56 2026 GMT
        Subject: CN=fcda527c1d013558944befb7453b86c00b79f7ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ec:02:71:2d:1f:13:56:20:f8:df:30:7c:7f:
                    ea:84:1d:4b:f2:d5:dd:de:8c:c8:c9:b7:f1:f1:6f:
                    80:11:4f:4b:c8:43:f7:59:1a:fb:f2:21:48:a8:3a:
                    27:d2:91:00:9a:bf:99:7e:bc:d2:63:f6:63:57:26:
                    be:57:0b:c6:f0:bb:89:03:e6:21:5c:7d:05:f9:73:
                    93:00:09:13:54:fd:bb:2d:5f:72:e4:16:d7:bc:8b:
                    84:c4:d1:25:99:be:0a:1e:c9:c0:ce:d2:bb:13:f3:
                    7d:b2:96:05:c8:db:f8:dd:0c:2f:8a:55:d2:b6:13:
                    86:29:93:d7:b1:56:35:60:9c:fe:68:ff:8b:ba:fc:
                    e4:4c:24:12:ae:69:9b:18:86:3e:8e:0a:b4:e1:65:
                    d9:8f:e9:56:b7:04:72:59:54:0d:c0:56:23:08:a4:
                    e7:49:17:3e:04:20:a6:5b:8f:03:1d:74:30:25:65:
                    31:ca:42:fd:ca:35:1a:76:81:d8:1d:8f:4a:67:80:
                    2c:9a:87:7b:50:57:7f:d6:9d:11:98:1b:24:6a:73:
                    ec:1a:5f:9c:ec:1d:7c:58:8f:9a:77:3b:88:f7:35:
                    30:87:ad:ad:6b:d5:d0:66:3f:27:a9:ba:c9:06:e0:
                    0f:a1:97:d4:4d:26:61:08:51:09:c3:b4:c0:14:8e:
                    be:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:DA:52:7C:1D:01:35:58:94:4B:EF:B7:45:3B:86:C0:0B:79:F7:AD
            X509v3 Authority Key Identifier:
                keyid:5E:42:C3:56:12:F4:5A:F4:11:03:52:0A:F2:76:1C:DA:A5:1E:3A:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:aa:f1:91:ea:96:a4:da:a7:34:1b:d2:74:a9:0b:4b:a3:81:
         2d:30:1c:9f:bc:45:96:96:8e:ba:e2:59:a6:27:3a:90:48:3b:
         37:7b:31:4f:37:f4:39:07:16:b9:f3:69:8e:60:9d:0b:6c:21:
         65:78:f9:73:7d:64:ef:0c:4c:59:c3:6d:05:7d:0d:9e:38:dc:
         69:ba:f0:2b:43:b4:9e:4f:c8:d2:39:0f:8c:5a:2e:9c:9f:82:
         4d:7c:84:48:b2:cb:3c:29:d2:b9:3a:ee:f0:0e:c6:54:d2:c3:
         3e:93:0a:3a:8d:72:b8:13:52:6a:80:2e:97:20:61:51:f4:21:
         56:4f:14:53:fe:71:6e:63:20:b6:06:04:9b:ff:7c:92:aa:8b:
         2a:fd:67:4f:76:4a:2a:9a:3f:21:7a:41:36:fb:d6:54:75:6c:
         62:a3:c9:a5:88:77:4e:c5:b6:32:cc:e7:e1:52:c0:b4:b4:41:
         97:3a:89:65:04:77:f9:6f:59:94:1e:af:0d:75:b5:fb:b6:b0:
         46:7f:d2:19:37:16:52:f1:14:07:60:71:52:be:de:9d:73:f8:
         5b:d2:23:25:5f:e8:75:dd:6a:72:58:3d:82:08:87:c4:9e:e1:
         b2:ec:60:73:3f:83:36:3e:dd:22:14:70:4c:46:00:d3:9a:07:
         42:43:76:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:29:52 2026 by rpki-client